The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Robert Franklin <rcf34 AT cam.ac.uk>]

On 20 Jan 2016, at 11:52, Stefan Winter 
<stefan.winter AT restena.lu>
 wrote:

> The certificate itself is also signed with SHA-1. The signing process on
> cat.eduroam.org for the resulting executable is IIRC signing with SHA-256.
> 
> The validation failure does not come from the intermediate, but from the
> signing cert itself.

Thanks.  This is where it strays into the world of Windows that I'm not an 
expert on.


> Please see my other post about more details on this.

Thanks and thanks for the urgent work to remedy this (I've seen the 
announcement).


I think the only thing wrong with that post is that, on Windows 10 (possibly 
Windows 8, too - but not Windows 7), I think it affects all browsers (not 
just IE) as SmartScreen is implemented at the OS level, rather than as part 
of Internet Explorer.  Certainly it affects Chrome.

Thanks again,

  - Bob


-- 
Bob Franklin   
rcf34 AT cam.ac.uk
 / +44 1223 748479
Networks, University Information Services, University of Cambridge